SEPM daily report contains an item that requires intervention

Now what? What is the best way to handle these things, remotely if possible.

Let's start with the obvious, and either get the user to run a full scan, or trigger one yourself from the Console. Let's say the machine pops up again in a day or so: maybe the same item, maybe another item such that you think there's still a resident infection(s).

What are your options from here? Which tools are suggested, in order? What's the difference between SymHelp/PowerEraser and SymERT?

I would definitely read up any links provided, but in a more common language, how do you proceed?

Currently using 12.1 RU4 on SEPM with a mix of 12.1 RU2 and greater clients, both PC and Mac. Thanks for any help.